CVE-2013-0262 Rack Vulnerable to Path Traversal
MediumCVSS 4.3
EPSS 2.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | >= 1.5.0, < 1.5.2 | 1.5.2 |
| rubygems rack(RubyGems) | >= 1.4.0, < 1.4.5 | 1.4.5 |
| rubygems rack(RubyGems) | = 1.5.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.5.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.4 | No fix listed |
| debian/ruby-rack(Debian:12) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:13) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:14) | < 1.4.1-2.1 | 1.4.1-2.1 |
| rack project rack | = 1.4.0 | No fix listed |
| rack project rack | = 1.4.1 | No fix listed |
| rack project rack | = 1.4.2 | No fix listed |
| rack project rack | = 1.4.3 | No fix listed |
| rack project rack | = 1.4.4 | No fix listed |
| rack project rack | = 1.5.0 | No fix listed |
| rack project rack | = 1.5.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- bugzilla.redhat.com
- bugzilla.redhat.com
- gist.github.com
- github.com
- groups.google.com
- openSUSE-SU-2013:0462 vendor-advisory
- github.com exploit
- github.com
- github.com product
- Debian Security Tracker CVE-2013-0262 vendor-advisory
- rack.github.com
- 52033 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking